GitHub/neovim
1
0
Fork 0
mirror of https://github.com/neovim/neovim synced 2025-07-17 01:31:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

fix(coverity/510275): linematch out of bounds access (#30687)

Browse Source 
Problem:
Int pointer cast to unsigned long pointer causes potential memory
corruption.

Solution:
Cast and store value first, then pass the new pointer.
This commit is contained in:
Devon Gardner
2024-10-07 23:22:09 +00:00
committed by GitHub
parent 5805716ca4
commit 60e1862ccb
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/nvim/linematch.c
View File

@ -150,7 +150,9 @@ static int count_n_matched_chars(mmfile_t **sp, const size_t n, bool iwhite)
mmfile_t fastforward_buf_to_lnum(mmfile_t s, linenr_T lnum) mmfile_t fastforward_buf_to_lnum(mmfile_t s, linenr_T lnum)
{ {
for (int i = 0; i < lnum - 1; i++) { for (int i = 0; i < lnum - 1; i++) {
s.ptr = strnchr(s.ptr, (size_t *)&s.size, '\n'); size_t n = (size_t)s.size;
s.ptr = strnchr(s.ptr, &n, '\n');
s.size = (int)n;
if (!s.ptr) { if (!s.ptr) {
break; break;
} }